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DETAILED ACTION 
Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

I 

Claims 1-23 are rejected under 35 U.S.C. 103(a) as being unpatentable over Rangedahl 

I 

(5,790,074) in view of Stailings (Cryptography and network security), f 

In reference to claims I and 22, Rangedahl discloses a system for remotely and 
automatically verifying the location of an electronic device and authorizing operation of the 
device if it resides in an allowed geographical location (abstract). Rangedahl discloses a location 
verification server for receiving a location verification request from a user computer desiring 
authorization to conduct a transaction with a transaction server (authorization device), the 
location verification server including (Fig. 1 part 20): a location identification system for 
obtaining a location-related identifier associated with the source of the location verification 
request (column 5 lines 58-67); and a message constructor for encoding the location-related 
identifier into a message (column 5 lines 58-67); a transaction server (authorization device) 
adapted to receive the message, the transaction server including: 

a message decoder for decoding the location-related identifier encoded within the message 
(column 6 lines 1-15); and a transaction authorizer system for authorizing transaction between 
the user computer and the transaction processor if the pre-specified location comprises the 
location identified by the location-related identifier (column 6 lines 16-31); and a message 
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transmit facility for transporting the message from the location verification server (part 120) to 
the transaction server (part 20) (Fig. 1). 

Although Rangedahl discloses the authentication information encoded into a message 
format (authorization request format), wherein the definition of encode is programming to put 
something into code, Rangedahl does not disclose encoding (encrypting) the location-related 
identifier into a message, thus the authentication information. 

Stallings discloses a system for authentication wherein the user sends a ticket to the 
authentication server and the ticket includes that ID and network address of the user (page 328). 
The server provides the service (transaction) after the user is authenticated (Fig. 11.1). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the encryption of the system of Stalling to encrypt the authentication 
information in the system of Rangedahl. One of ordinary skill in the art would have been 
motivated to do this because encrypting the authentication information makes the system more 
secure so that eavesdroppers are discouraged from eavesdropping. 

In reference to claim P, Rangedahl discloses a system for remotely and automatically 
verifying the location of an electronic device and authorizing operation of the device if it resides 
in an allowed geographical location (abstract). Rangedahl discloses a verification server for 
receiving an incoming telephone call from a user desiring to conduct a location-dependent 
transaction with a transaction server, the verification server including (Fig. 2 in combination with 
column 3 lines 28-37): a decoder for obtaining a location-related identifier associated with the 
incoming telephone call (column 6 lines 1-15 in combination with column 4 lines 16-25); and 
location-related message constructor for encoding the location-related identifier into a location- 
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related message (column 5 lines 58-67); a transaction server adapted to receive the location- 
related message, the transaction server (authorization device) including (part 20 Fig. 2): a 
location-related message decoder for determining the location-related identifier encoded within 
the location-related message (column 6 lines 1-15); transaction authorization system for 
determining whether the pre-specified location comprises the location identified by the location- 
related identifier (column 6 lines 16-31); and a transaction processor for conducting the location- 
dependent transaction if the transaction authorization system determines the pre-specified 
location comprises the location identified by the location-related identifier (authorization device 
as in column 4 Hnes 1-15); and location-related message transmit facility transporting the 
location-related message from the verification server to the transaction server (column 4 line 65 
to column 5 line 12). 

Although Rangedahl discloses the authentication information encoded into a message 
format (authorization request format), wherein the definition of encode is programming to put 
something into code, Rangedahl does not disclose encoding (encrypting) the location-related 
identifier into a message, thus the authentication information. 

Stallings discloses a system for authentication wherein the user sends a ticket to the 
authentication server and the ticket includes that ID and network address of the user (page 328). 
The server provides the service (transaction) after the user is authenticated (Fig. 11.1). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the encryption of the system of Stalling to encrypt the authentication 
information in the system of Rangedahl. One of ordinary skill in the art would have been 
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motivated to do this because encrypting the authentication information makes the system more 
secure so that eavesdroppers are discouraged from eavesdropping. 

In reference to claim 10 Rangedahl discloses a system for remotely and automatically 
verifying the location of an electronic device and authorizing operation of the device if it resides 
in an allowed geographical location (abstract). Rangedahl discloses a location verification server 
for receiving a telephone call comprising a location verification request from a user computer 
desiring authorization to conduct a transaction with a transaction server, the location verification 
server including (column 4 lines 1-15): a location identification system for obtaining a location- 
related identifier associated with the user computer (column 4 lines 16-25); user identification 
system for obtaining a user identifier of the user associated with the location verification request 
(column 4 lines 16-25); and a message constructor for encoding the location-related identifier, 
the user identifier and the timestamp into a location verification message (column 5 lines 58-67); 
and a transaction authorization server adapted to process a location verification message, the 
transaction authorization server including: a message decoder for decoding the location-related 

identifier, the user identifier and the timestamp encoded within the locatioli verification message 

t 

(column 6 lines 1-15); and a transaction authorization system for authorizing a transaction for the 
user identified the user identifier if the pre-specified location comprises the location identified by 
the location-related identifier (column 6 lines 16-31); and a message transmit facility for 
transporting the message from the verification server to the transaction Server (part 120 and part 
20 Fig. 1). 

Although Rangedahl discloses the authentication information encoded into a message 
format (authorization request format), wherein the definition of encode is programming to put 
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something into code, Rangedahl does not disclose encoding (encrypting) the location-related 
identifier into a message, thus the authentication information. 

Stallings discloses a system for authentication wherein the user sends a ticket to the 
authentication server and the ticket includes that ID and network address of the user (page 328). 
The server provides the service (transaction) after the user is authenticated! (Fig. 11.1). Stallings 
further includes a clock capable of generating a timestamp associated with the location 
verification request (page 328 paragraph 2); and a transaction authorization system for 
authorizing a transaction for the user identified the user identifier if the pre-specified location 
comprises the location identified by the location-related identifier and the timestamp is less than 
a predetermined age (page 328 paragraph 2). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the encryption of the system of Stalling to encrypt the authentication 
information in the system of Rangedahl. One of ordinary skill in the art would have been 
motivated to do this because encrypting the authentication information makes the system more 
secure so that eavesdroppers are discouraged from eavesdropping. 

In reference to claim 16, Rangedahl discloses a system for remotely and automatically 
verifying the location of an electronic device and authorizing operation of the device if it resides 
in an allowed geographical location (abstract). Rangedahl discloses a verification server for 
receiving an incoming telephone call from a user desiring to conduct a location-dependent 
transaction with a transaction server, the verification server including (Fig. 2 in combination with 
column 3 lines 28-37): a decoder for obtaining a location-related identifier associated with the 
incoming telephone call (column 6 lines 1-15 in combination with column 4 lines 16-25); and 
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location-related message constructor for encoding the location-related identifier into a location- 
related message (column 5 lines 58-67); a transaction server adapted to receive the location- 
related message, the transaction server (authorization device) including (part 20 Fig. 2): a 
location-related message decoder for determining the location-related identifier encoded within 
the location-related message (column 6 lines 1-15); transaction authorization system for 
determining whether the pre-specified location comprises the location identified by the location- 
related identifier (column 6 lines 16-31); and a transaction processor for conducting the location- 
dependent transaction if the transaction authorization system determines the pre-specified 
location comprises the location identified by the location-related identifier (authorization device 
as in column 4 lines 1-15); and location-related message transmit facility transporting the 
location-related message from the verification server to the transaction server (column 4 line 65 
to column 5 line 12). 

Although Rangedahl discloses the authentication information encoded into a message 
format (authorization request format), wherein the definition of encode is programming to put 
something into code, Rangedahl does not disclose encoding (encrypting) the location-related 
identifier into a message, thus the authentication information. 

Stallings discloses a system for authentication wherein the user sends a ticket to the 
authentication server and the ticket includes that ID and network address of the user (page 328). 
The server provides the service (transaction) after the user is authenticated (Fig. 11.1). Stallings 
ftjrther includes a clock capable of generating a timestamp associated with the location 
verification request (page 328 paragraph 2); and a transaction authorization system for 
authorizing a transaction for the user identified the user identifier if the pre-specified location 
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comprises the location identified by the location-related identifier and the timestamp is less than 
a predetermined age (page 328 paragraph 2). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the encryption of the system of Stalling to encrypt the authentication 
information in the system of Rangedahl. One of ordinary skill in the art would have been 
motivated to do this because encrypting the authentication information makes the system more 
secure so that eavesdroppers are discouraged from eavesdropping. 

In reference to claim 23, Rangedahl discloses a system for remotely and automatically 
verifying the location of an electronic device and authorizing operation of the device if it resides 
in an allowed geographical location (abstract). Rangedahl discloses a location verification server 
for receiving telephone call comprising a location verification request from a user computer 
desiring authorization to conduct transaction with a transaction server, the location verification 
server including (Fig 2 part 20): a location identification system for obtaining call identification 
information, the call identification information comprising information associated with the 
location of the call origin (column 4 lines 16-20); a location code generator for generating a 
location-related identifier based, at least in part, upon the call identification information (column 
6 lines 1-1 5); a user identification system for obtaining a user identifier of the user associated 
with the location verification request (column 6 lines 16-30); and message constructor for 
encoding the location-related identifier, the user identifier, the message constructor being 
adapted to incorporate an message authentication sequence within the message (column 5 lines 
58-67); message transmitter for transmitting the location verification message to the user 
computer (Fig. 3 B part 340); and a transaction authorization server adapted to process a location 
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verification message, the transaction authorization server including: a message receiver for 
receiving the location verification message from the user computer (part 120 Fig. 4); a message 
decoder for decoding the location-related identifier, the message decoder being adapted to reject 
the message if the message authentication sequence reflects that the message has been altered 
since had been encoded by the message constructor (column 4 lines 1-8). 

Although Rangedahl discloses the authentication information encoded into a message 
format (authorization request format), wherein the definition of encode is programming to put 
something into code, Rangedahl does not disclose encoding (encrypting) the location-related 
identifier into a message, thus the authentication information. 

Stallings discloses a system for authentication wherein the user sends a ticket to the 
authentication server and the ticket includes that ID and network address of the user (page 328). 
The server provides the service (transaction) after the user is authenticated (Fig. 11.1). Stallings 
further includes a clock capable of generating a timestamp associated with the location 
verification request (page 328 paragraph 2); and a transaction authorization system for 

authorizing a transaction for the user identified the user identifier if the pr|-specified location 

I 

comprises the location identified by the location-related identifier and the>timestamp is less than 

I 

r 

a predetermined age (page 328 paragraph 2). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the encryption of the system of Stalling to encrypt the authentication 
information in the system of Rangedahl. One of ordinary skill in the art would have been 
motivated to do this because encrypting the authentication information makes the system more 
secure so that eavesdroppers are discouraged from eavesdropping. 
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In reference to claims 2, 11, and 17, wherein the location verification request from the 
user computer is made over a telephone network, and wherein the location-related identifier 
comprises at least a portion of the calling telephone number (Fig. 2 in combination with column 
4 lines 16-25). 

I 

In reference to claims 3, 72, and 18, wherein the user computer is connected to the 
transaction server via a first network, and the message transmit facility transports the message to 
the transaction server over the telephone network, via the user computer, and over the first 
network (Fig. 2). 

In reference to claims 4, 13, and 19, wherein the verification server is connected to the 
transaction server via a second network, and the message transmit facility is adapted to transport 
the message to the transaction server over the second network (Fig. 2). 

In reference to claim 5, wherein the message-transmit facility is adapted to transmit the 
message to the transaction server while the user computer is connected to the verification server 
via the telephone network (Fig. 2). 

In reference to claims 6, 14-15, and 20-21, wherein the message transmit facility is 
adapted to transmit a disconnect message to the transaction server when the user computer ceases 
to be connected to the verification server via the telephone network (Fig 3B part 350). 

In reference to claim 7, wherein the location-related identifier comprises an indication of 
the user's longitude and latitude as determined by a transponder (column 5 Hnes 58-67). 

In reference to claim 8, wherein the indication of the user's longitude and latitude 
encrypted. 
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Although Rangedahl discloses the authentication information encoded into a message 
format (authorization request format), wherein the definition of encode is programming to put 
something into code, Rangedahl does not disclose encoding (encrypting) the location-related 
identifier into a message, thus the authentication information. The authentication information 
disclosed by Rangedahl includes longitude and latitude information (column 5 lines 58-67). 

Stallings discloses a system for authentication wherein the user sends a ticket to the 
authentication server and the ticket includes that ID and network address of the user (page 328). 
The authentication information disclosed by Stallings is encrypted (page 328). 

At the time the invention was made, it would have been obvious to a person of ordinary 
skill in the art to use the encryption of the system of Stalling to encrypt the authentication 
information in the system of Rangedahl. One of ordinary skill in the art would have been 
motivated to do this because encrypting the authentication information makes the system more 
secure so that eavesdroppers are discouraged fi*om eavesdropping. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Paula W. Klimach whose telephone number is (571) 272-3854. 
The examiner can normally be reached on Mon to Thr 9:30 a.m to 5:30 p.m. 

If attempts to reach the examiner by telephone are unsuccessfial, the examiner's 
supervisor, Kim Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or PubUc PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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